On October 28, 2026, Juniper fixed CVE-2026-103409, a missing-authentication flaw (CVSS 9.8) that gives an unauthenticated network attacker root privileges on the Session Smart Router until the device is onboarded to Mist or Conductor. Upgrade to 7.0.5, 7.1.7, or 7.2.3 and onboard new boxes immediately, because the provisioning window is the exposed surface.
Dell closed six maximum-severity vulnerabilities in Container Storage Modules, the layer that ties its PowerStore, PowerScale and PowerFlex arrays to Kubernetes. With no authentication at all, an attacker steals the arrays’ admin credentials, gains root on the nodes and reads every Secret: move to CSM 1.18.0 now.
CVE-2026-76504 lets an unauthenticated attacker bypass Catalyst SD-WAN Manager authentication through URI encoding and gain admin rights. There is no workaround: patch immediately and inspect j_security_check logs.
On September 9, 2026, Cisco confirmed that CVE-2026-20079, a CVSS 10.0 authentication bypass in Secure Firewall Management Center, is being actively exploited, even though a patch has existed since March. Network teams must patch immediately, then hunt for indicators of compromise before declaring a device healthy.
NEC fixes CVE-2026-16876, a critical missing-authentication flaw (CVSS 9.4) in the WebGUI of UNIVERGE IX-R and IX-V enterprise routers: a forged message bypasses login and runs arbitrary CLI commands. Apply the firmware update, or disable the WebGUI if it is reachable from the internet.
CVE-2023-49105, a WebDAV authentication flaw rated CVSS 9.8 and fixed by ownCloud in late 2023, is now being actively exploited — CISA added it to the KEV catalog on 27 August 2026. Inventory your exposed ownCloud 10.x instances, move to 10.13.1 or later, and treat them as possible compromises.
Patched by Apple on August 6, 2026, the Screen Sharing authentication bypass (CVE-2026-65400) is being actively exploited on Macs exposed on port 5900: attackers gain root and deploy Monero miners. Disable Screen Sharing or apply the update, and never expose port 5900 to the internet.
